IT Security Analyst

APGFCU Your Community Credit Union! For over 80 years APGFCU has shared our financial experience and provided valuable products and services to build stability and financial independence one member at a time. We are looking for those who want to join this movement and become a part of a growing organization. We offer competitive pay and great benefits.

SUMMARY: Under the general direction of the VP IT Infrastructure this position is responsible for the engineering support maintenance and implementation of APGFCUs onpremise and cloudbased IT infrastructure and cyber security tools. This includes hardware & software cloud services acquisition installation configuration and ongoing maintenance ensuring optimal performance scalability and security. This person will need to rely on experience and judgment to plan and accomplish corporate goals.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

Systems Design and Engineering:

• Design deploy and maintain the credit unions corporate onpremise and cloud infrastructure including networking firewalls IPS/IDS VDI and virtual and physical servers (Linux Microsoft VMware ESXi Azure); carry out the infrastructure maintenance and configurations for backup and disaster recovery purposes.
• Work directly with firewalls (Meraki/Palo Alto) IDS IPS and other security tools and infrastructure.
• Proactively monitor onpremise IaaS and cloud systems for performance stability security and capacity management and prevent and resolve any issues.
• Use network monitoring vulnerability management and SIEM tools to examine network traffic and identify both external and internal threats to ensure security controls meet the APGFCU infrastructure guidelines and industry best practices.
• Design and implement a multilayer security strategy to protect APGFCU information assets.
• Implement and maintain onpremise and cloud infrastructure and security controls including enhanced detection data loss prevention event correlation and vulnerability management capabilities.
• Perform network troubleshooting as needed; work with 3^rd party vendors and ensure continuous infrastructure availability; 24x7x365. Must be available to work after hours and be part of on call rotation
• Engineer security controls on APGFCUs infrastructure to include LANs WANs Firewalls and Cloud services.
• Implement and administer firmware and patch management for all IT hardware and operating systems (Linux Windows Server VMware; Firewalls routers and switches)
• Design deploy and configure security configurations such as SSO MFA centralized logging DLP and encryption to protect credit unions information systems.
• Create scripts to automate task and configuration items using PowerShell and other scripting tools.
• Ensure the security and integrity of the onpremise IaaS and cloud solutions including compliance with APGFCU NCUA industry standards and information security principles and best practices.
• Implement and manage internal and external vulnerability scans and penetration tests and remediate any findings.
• Implement and manage 3^rd party VPNs remote access and MDM systems.
• Manage and perform the annual of disaster recovery testing and support audits and assessment activities.
• Provide security infrastructure expertise to business applications ensuring they are deployed and implemented securely.
• Serve as technical project lead on IT and corporate projects and provide technical and functional IT infrastructure expertise
• Participate in the development of the annual IT strategic plan review existing infrastructure security configuration plan and make recommendations for future enhancements.
• Maintain all documentation pertaining to the network and cyber security infrastructure.
• Adhere to the established change management and turnover log

Project Management:

• Lead internal technical project teams in the implementation of infrastructure security upgrades such as Firewalls VPNs IPS/IDS EDRData Loss Prevention Web and email filters and others.
• Evaluate project proposals and implement project lifecycle and manage approved projects.
• Work closely with the VP of IT Infrastructure to ensure technical specifications meet the APGFCU infrastructure guidelines and with the implementation of credit union wide I.T projects.

Professional Development:

• Remain current with developments in information technology and information security and their potential impact on the credit unions present and future needs.
• Continue technical professional development through seminars and workshops membership in technical and professional organizations and through reading technical publications and journals.
• Network with others in the credit union industry and interface with vendors.
• Maintain certifications requirements and work towards acquiring new certifications as required

Other: Perform additional responsibilities as assigned.

ADDITIONAL: Responsible for completion of applicable training and compliance with federal regulations and APGFCU policies and procedures as related to the duties of this position (Bank Secrecy Act Information Security as examples if applicable).

KNOWLEDGE SKILLS AND ABILITIES:

Ability to handle daytoday operations troubleshooting network connectivity problems and application issues. Must be skilled in communication human relations problemsolving and organization. Strong understanding on OSI model TCP/IP subnetting routing protocols (EIGRP OSPF iBGP) firewall technologies VPN and remote access core networking (WAN/LAN/DHCP/VLAN/VXLAN/ /IPv4/IPv6/QOS) encryption (SSL/TLS) scripting (Powershell/Python) virtualization (VMware) content filtering MDM VDI.

QUALIFICATIONS:

EDUCATION: Bachelors Degree in Cyber Security or other related technical field. Experience can be credited in lieu of education. Current certification in one of the following areas is required. (CISSP MCITP CCNA VMware).

EXPERIENCE: Minimum ten years of work experience in a LAN/WAN environment consisting of cyber security or in IT security related field required. Extensive handson experience with network infrastructure consisting of firewalls IPS/IDS SIEM web and email filters data loss prevention antivirus/antimalware systems Microsoft servers virtualization Linux Cisco routers and switches in a enterprise networking environment. Advanced knowledge of networking in a Microsoft Server domain AD Group Policy MS SQL server IIS Exchange Windows networking virtualization SANs VSphere and certificatebased authentication pass wordless authentication.

PHYSICAL DEMAND: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job the employee is regularly required to stand; walk; use hands to finger handle or feel objects tools or controls; and talk or hear. The employee frequently is required to reach with hands and arms. The employee is frequently required to sit stoop kneel or crouch. The employee must frequently lift and/or move up to 25 pounds and be capable of transporting related supplies and equipment. Specific vision abilities by this job include vision distance vision color vision peripheral vision depth perception and the ability to focus.

Compensation information: Offers are based on experience and education.

$92872.00 $116084.80 annually

APGFCU provides comprehensive benefits such as: medical and dental (shared expense) vision 401(k) life and disability insurance flexible spending account employee assistance program referral program educational assistance holidays annual leave and sick leave.

APGFCU is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race color religion sex national origin disability to Protected Veteran status. Please use the attached link to view the EEO law poster is committed to working with and providing reasonable accommodations to persons of all abilities including persons with disabilities. If you need a reasonable accommodation for any part of the employment process please send to the Human Resources Department and let us know the nature of your request and your contact information. Reasonable accommodations are considered on a casebycase basis. Please note that only inquiries concerning a request for reasonable accommodations will be responded to from this email address.